3.2 Isolation: blanking, blinding, double block and bleed

1 The definition, and the word “completely”

1910.146(b): isolation means the process by which a permit space is removed from service and completely protected against the release of energy and material into the space by such means as: blanking or blinding; misaligning or removing sections of lines, pipes or ducts; a double block and bleed system; lockout or tagout of all sources of energy; or blocking or disconnecting all mechanical linkages.

Two things to notice. Isolation covers energy and material together — it is not a piping concept with an electrical footnote. And the standard does not say “reduced” or “controlled”: it says removed from service and completely protected. A valve that is closed is not isolation, because a valve is a device somebody can open.

2 Blanking, blinding, and what a rating means

1910.146(b) defines blanking or blinding as the absolute closure of a pipe, line or duct by the fastening of a solid plate — such as a spectacle blind or a skillet blind — that completely covers the bore and is capable of withstanding the maximum pressure of the pipe, line or duct with no leakage beyond the plate.

Three tests in one sentence, and each one fails in practice for a different reason. “Solid plate” rules out a gasket, a wafer with a hole, or a slip plate that only sits over part of the flange face. “Completely covers the bore” rules out a blind that is too small for the line it is in. “Capable of withstanding the maximum pressure” is an engineering statement: a piece of sheet steel cut on site is not a rated blind, and a blind rated for 150 psi in a line that can see 600 is a delayed failure with a person on the other side of it.

A spectacle blind is the version that solves the human problem: two discs on a common web, one solid and one open, so the flange is always occupied by one of them and the position is visible from the walkway. Nobody has to remember whether the blind is in.

3 Double block and bleed — and why the bleed is the whole idea

1910.146(b): double block and bleed means the closure of a line, duct or pipe by closing and locking or tagging two in-line valves and by opening and locking or tagging a drain or vent valve in the line between the two closed valves.

The two closed valves are the redundancy. The open vent between them is the proof: if the upstream valve leaks, the leak goes out of the open drain at atmospheric pressure instead of accumulating between the valves and pushing past the second one. It also gives you somewhere to look. A dripping bleed tells you the upstream valve is passing, which is information you cannot get any other way without opening the space.

Note what the definition requires of the bleed: it is opened and locked or tagged open. A closed bleed valve turns a double block and bleed into two closed valves in series, which is not what the standard defines and not what protects the entrant. The commonest field error is a bleed that was cracked open, dripped on somebody's boots, and got closed again.

Two more limits worth stating plainly. Double block and bleed is a lesser form of isolation than a blind, because it depends on valve seats; many programs allow it only for lower-hazard services or as a temporary measure while blinds are installed. And it is only isolation if both valves are in-line on the same run — two valves on branches that rejoin downstream of the space are not a double block.

4 Misaligning, removing, and breaking the line

The most convincing isolation is an air gap. Remove a spool piece, unbolt a flange and swing the line clear, drop a section of duct, disconnect the hose: now nothing can arrive at the space regardless of what anyone does at a valve. This is what “misaligning or removing sections of lines, pipes, or ducts” means, and where it is practical it should be the default.

Opening the line is itself a hazardous operation, and the standard gives it a name. 1910.146(b): line breaking means the intentional opening of a pipe, line or duct that is or has been carrying flammable, corrosive or toxic material, an inert gas, or any fluid at a volume, pressure or temperature capable of causing injury.

The phrase “or has been” is the important one, and it applies to more lines than crews expect: a drained acid line, a steam line that has cooled, a nitrogen line that has been vented, a slurry line with a plug of solids holding pressure behind it. Line breaking is planned as its own task, with its own PPE, its own drain-down and depressurization, and its own confirmation — the flange loosened on the far side first, and the person doing it standing out of the path.

5 Energy isolation is a 1910.147 job

“Lockout or tagout of all sources of energy” in the isolation definition is not a shorthand for turning things off. 29 CFR 1910.147(a)(3)(ii) settles which standard governs: when other standards in part 1910 require the use of lockout or tagout, they shall be used and supplemented by the procedural and training requirements of the lockout/tagout standard. So a permit space isolation inherits everything from 1910.147 — a written energy control procedure for the equipment, identification of every energy source, isolation, application of a personal lock by every exposed person, release of stored energy, and verification that isolation actually worked.

The stored-energy step is the one that reaches into confined spaces most directly. After the power is off, a permit space can still hold a charged accumulator, a spring-loaded damper, a suspended ram, a rotating flywheel coasting down, a head of liquid, residual pressure, residual heat, or a capacitor bank. The definition of isolation calls for blocking or disconnecting all mechanical linkages for exactly this reason: a shaft that can still be turned by hand from outside, or a blade that can free-fall, is not isolated because a circuit was opened.

And where several trades are exposed, group lockout under 1910.147(f)(3) is the mechanism: a procedure giving each employee protection equivalent to a personal lock. Every person in the space has their own lock on the box, which means the machine cannot be restored while any one of them is still inside — not even by the person who put the first lock on. For construction, 1926.417 covers tagging de-energized circuits and 1926.702(j) concrete and masonry equipment.

6 When isolation is infeasible, and what replaces it

The standard admits that some spaces cannot be isolated. 1910.146(d)(5)(i) allows for isolation being infeasible because the space is large or is part of a continuous system, such as a sewer — and then it does not shrug. Pre-entry testing is performed to the extent feasible, and if entry is authorized, entry conditions must be continuously monitored in the areas where authorized entrants are working. 1926.1204(e)(1) says the same and adds the early-warning system for non-isolated engulfment hazards.

That is the trade the standard is willing to make: where you cannot stop the hazard from arriving, you monitor for its arrival continuously and you keep a way out. It is a much weaker position than isolation, and it should be reserved for the cases where isolation is genuinely impossible rather than merely inconvenient.

Where the hazard is atmospheric and cannot be isolated at all, the remaining controls are purging, inerting, flushing and ventilating under 1910.146(d)(3)(iv) — controls, not elimination, with everything Part 2, Chapter 4 said about them. And the construction note to 1926.1204(c)(4) marks the outer edge: where the employer cannot get the atmosphere below 10 percent LFL, entry is permitted only with the space inerted so the whole atmosphere is non-combustible, PPE addressing the resulting oxygen deficiency, and every physical hazard eliminated or isolated. That is the most heavily controlled entry in the standard, and it exists because sometimes the only way to make a space non-flammable is to make it unbreathable.